#office-hours (2021-02)

Meeting password: sweetops

Public “Office Hours” are held every Wednesday at 11:30 PST via Zoom. It’s open to everyone. Ask questions related to DevOps & Cloud and get answers! https://cpco.io/slack-office-hours

Public “Office Hours” are held every Wednesday at 11:30 PST via Zoom. It’s open to everyone. Ask questions related to DevOps & Cloud and get answers! https://cpco.io/slack-office-hours

Meeting password: sweetops

2021-02-26

Marcin Brański avatar
Marcin Brański

Im going to cross post my #kubernetes question here. I’m quite sure someone already did it

I’m wondering if there are already some solutions for disaster recovery active-active K8S clusters where traffic can be partially switched and security is as granular to a pod level. I saw this https://portworx.com/kubernetes-disaster-recovery/ but not sure. Maybe some used anything like and can share some insights

https://sweetops.slack.com/archives/CBW699XE0/p1614342312005100

How to implement Disaster Recovery (DR) on Kubernetes - Portworx attachment image

WHITEPAPER Get the Essential Capabilities of Disaster Recovery for Kubernetes ‣ The Challenge Building an enterprise grade Kubernetes platform entails more than simply deploying your applications. You need to protect them too. However, traditional DR solutions aren’t a fit for Kubernetes applications because they rely on machine-based backups and don’t speak the language of Kubernetes.learn more

I’m wondering if there are already some solutions for disaster recovery active-active K8S clusters where traffic can be partially switched and security is as granular to a pod level. I saw this https://portworx.com/kubernetes-disaster-recovery/ but not sure. Maybe some used anything like and can share some insights

jose.amengual avatar
jose.amengual

is that a Kubernetes concern ?

How to implement Disaster Recovery (DR) on Kubernetes - Portworx attachment image

WHITEPAPER Get the Essential Capabilities of Disaster Recovery for Kubernetes ‣ The Challenge Building an enterprise grade Kubernetes platform entails more than simply deploying your applications. You need to protect them too. However, traditional DR solutions aren’t a fit for Kubernetes applications because they rely on machine-based backups and don’t speak the language of Kubernetes.learn more

I’m wondering if there are already some solutions for disaster recovery active-active K8S clusters where traffic can be partially switched and security is as granular to a pod level. I saw this https://portworx.com/kubernetes-disaster-recovery/ but not sure. Maybe some used anything like and can share some insights

jose.amengual avatar
jose.amengual

I imagine K8s holds your app

jose.amengual avatar
jose.amengual

not the front end routing to it

jose.amengual avatar
jose.amengual

so a CDN/Global Accelerator/DNS layer is necesary outside of K8s

2021-02-25

ekydfejj avatar
ekydfejj

Was referred here, for this question. I have been looking for a CI/CD pipeline solution for terraform changes. But i do use TG, and would be willing to switch so there are more options. It seems like https://github.com/cloudposse/terraform-provider-utils#examples, can solve the problem of the simplicity in TG to go up two levels for .hcl files. One thing i make a ton of use out of is path_relative_to_include , this both allows me to set a single remote state at the top of every VPC (using aws) with key = "prod/${path_relative_to_include()}/terraform.tfstate". I have also been making use of the file system to drill into my yaml files, nodes and directories align (the merits of this could be argued), doing…

inputs = {
  servers = local.servers[path_relative_to_include()]["servers"]
}

I’m more interested how you guys get around redefining the state file for each directory. I realize terragrunt can run multiple levels, but that’s really not a draw for me.

Thanks!

cloudposse/terraform-provider-utils

The Cloud Posse Terraform Provider for various utilities (E.g. deep merging) - cloudposse/terraform-provider-utils

2021-02-24

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
07:01:19 PM

@here office hours is starting in 30 minutes! Remember to post your questions here.

Evan Pitstick avatar
Evan Pitstick

is there a standard way of “injecting” a template into helm charts before it’s parsed with helmfile? Can the kustomize features of helmfile use helpers defined in the chart?

Vlad Ionescu avatar
Vlad Ionescu

I don’t think I’ll make it today My apologies

1
managedkaos avatar
managedkaos

Question: AWS CDK- What are your thoughts, especially if you’ve used any pattern-based code like https://github.com/cdk-patterns?tab=repositories for example (there are others).

Background: I recently tried to use CDK for a container project using some pattern-based code and found it difficult to wedge the code into a mold that fit my application (ports to the container on LB target groups along with heath checks, for example)

cdk-patterns - Overview

This is a place to store/share AWS Serverless architectures built with cdk - cdk-patterns

Zoom avatar
Zoom
07:29:19 PM

Erik Osterman (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:23 PM

Michael Jenkins has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:35 PM

Andy Roth has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:36 PM

Colton Wrisner has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:37 PM

Pierre Humberdroz has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:44 PM

Vladimir Andreev has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:59 PM

Evan Pitstick has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:00 PM

Brandon vh has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:04 PM

Omer Sen has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:06 PM

Andrew L has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:11 PM

Andy Miguel (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:56 PM

Florain Drescher has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:56 PM

PePe Amengual has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:14 PM

mb Branski has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:48 PM

Matteo Migliaccio has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:02 PM

David Lozano has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:21 PM

Leo Zavala has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:32 PM

Aleksandr Fofanov has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:58 PM

Mohammed Yahya has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:05 PM

Omer Sen has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:13 PM

Imran Hussain has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:14 PM

Matt Calhoun has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:29 PM

Nigel Kirby has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:32 PM

Tim Gourley has joined Public “Office Hours”

Zoom avatar
Zoom
07:34:36 PM

Salvatore has joined Public “Office Hours”

Zoom avatar
Zoom
07:34:40 PM

15138278650 has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:07 PM

Eric Berg has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:09 PM

Oliver Schoenborn has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:40 PM

Neil Gealy has joined Public “Office Hours”

Zoom avatar
Zoom
07:37:29 PM

Eric Berg has joined Public “Office Hours”

Zoom avatar
Zoom
07:37:53 PM

Jeremy (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:38:45 PM

Michael Sew has joined Public “Office Hours”

Zoom avatar
Zoom
07:39:43 PM

Eric Berg has joined Public “Office Hours”

Zoom avatar
Zoom
07:41:22 PM

venkatamutyala has joined Public “Office Hours”

Zoom avatar
Zoom
07:42:44 PM

Jim G has joined Public “Office Hours”

Zoom avatar
Zoom
07:42:50 PM

Matt Gowie has joined Public “Office Hours”

Zoom avatar
Zoom
07:45:10 PM

Zachary Loeber has joined Public “Office Hours”

OliverS avatar
OliverS

Question: what is the best place to propose a change to HCL2 language like: make enabling/disabling a resource/module a fist-class citizen in the language; eg a boolean metavariable called enabled so we’re not stuck with the count metavariable hack

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
hashicorp/hcl

HCL is the HashiCorp configuration language. Contribute to hashicorp/hcl development by creating an account on GitHub.

OliverS avatar
OliverS

Thanks I raised an issue there I’ll see what kind of response I get

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
enabling/disabling should be first-class citizen in HCL2 · Issue #450 · hashicorp/hcl

The notion of "nullness" or "existence" must be first class in a language, and the language should minimize how much "how" the user needs to express. Currently in orde…

Zoom avatar
Zoom
07:46:38 PM

Patrick Joyce has joined Public “Office Hours”

Zoom avatar
Zoom
07:47:02 PM

Harold R has joined Public “Office Hours”

Zoom avatar
Zoom
07:49:59 PM

Luis Masaya has joined Public “Office Hours”

Zoom avatar
Zoom
07:51:07 PM

Zachary Loeber has joined Public “Office Hours”

Zoom avatar
Zoom
07:54:13 PM

Adam Crown has joined Public “Office Hours”

Andy Miguel (Cloud Posse) avatar
Andy Miguel (Cloud Posse)

links from today’s announcements:

HashiCorp Prototype for Terraform Module Acceptance Terraform Testing See docs, and requires 0.15+ (alpha) https://github.com/hashicorp/terraform/pull/27873 https://github.com/hashicorp/terraform/pull/27873/files#diff-dd1cafe2a571c5e9f7b56d4d821e882c22d32b99f39260f53bd4e274b3550615


Terraform 0.15+ is shipping with support for undeclared variables values, but without the deprecation notice. https://github.com/hashicorp/terraform/issues/22004#issuecomment-783757089


Atlantis 0.17.0-beta shipped with basic support for OPA https://github.com/runatlantis/atlantis/releases/tag/v0.17.0-beta


Sponsor Cloud Posse / SweetOps / Office Hours for $1 / mo https://github.com/sponsors/cloudposse


Check out last week’s office hours on YouTube! https://www.youtube.com/c/cloudposse

Zoom avatar
Zoom
07:54:51 PM

Joaquin Menchaca has joined Public “Office Hours”

Zoom avatar
Zoom
07:55:23 PM

Mahmoud Dolah has joined Public “Office Hours”

Joaquin Menchaca avatar
Joaquin Menchaca

I have question about using kustomize in helmfile

Zoom avatar
Zoom
07:57:21 PM

Denys has joined Public “Office Hours”

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
roboll/helmfile

Deploy Kubernetes Helm Charts. Contribute to roboll/helmfile development by creating an account on GitHub.

roth.andy avatar
roth.andy
RothAndrew/convert-to-helm-raw-values

Small utility that will convert K8s YAML files to a values.yaml file capable of being used with the incubator/raw helm chart - RothAndrew/convert-to-helm-raw-values

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
Announcing Istio 1.9

Istio 1.9 release announcement.

Zoom avatar
Zoom
08:16:44 PM

Blaisep has joined Public “Office Hours”

Zoom avatar
Zoom
08:20:45 PM

ASIS SETHI has joined Public “Office Hours”

David Lozano avatar
David Lozano

what are the pros and cons of using k8 over aws ECS and what are the differences when managing k8 with or without helm charts. are helm charts to pure k8 yaml the same that cloudposse tf modules are to creating plain hcl files with tf resources directly? is that an accurate comparison?

Joaquin Menchaca avatar
Joaquin Menchaca

I had k8s question: what’s difference between pvc sotrageClassName or the annotation specifying storage-class, e.g. [volume.beta.kubernetes.io/storage-class](http://volume.beta.kubernetes.io/storage-class)

Joaquin Menchaca avatar
Joaquin Menchaca

I just found my own answer, took some digging.

Zoom avatar
Zoom
08:26:10 PM

Blaisep has joined Public “Office Hours”

Zoom avatar
Zoom
08:30:09 PM

Denys has joined Public “Office Hours”

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

hashcorp was a bit slower with their release this week! missed the 11:30am PT cut off

2021-02-17

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
07:00:52 PM

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Hello guys, this might have been asked before, but what criteria do you guys use when evaluating if something needs to be created as a module?

I recently joined a company with 6 cloud engineers that have been discussing about maturing their terraform deployment, and modules have been brought up. The -legacy- engineers wanted to create a module for everything, even simple ones. For example, azure resource groups, and the arguments were:

  1. Takes me 10 mins to write it anyway
  2. I can make it accept a comma-delimited name, and it creates multiple resource groups for me
  3. If you want to create 1 resource group, the module can handle it anyway
  4. I can ask for required tags on the resource groups, and I’m sure we’re going to need something else on those resource groups in the future

Our goal is to eventually allow our app dev teams to create their terraform code to deploy their infrastructure for their apps. They originally managed the deployment by creating standalone deployments for each resources - like 1 deployment for resource group, 1 for SQL PaaS, 1 for storage account - all separate repositories and “pipeline”. We would like to move to more application-based repositories that contains all the terraform code/infrastructure needed for the said application (shared services infrastructure like AKS will be separately managed)

I feel this is a case of over engineering/YAGNI, but being new, I may be biased. I don’t feel simple/standalone terraform resources should have another wrapper on top of it (module). Is there a compelling reason why this pattern can bite us in the future (aka very bad idea)?

Mohammed Yahya avatar
Mohammed Yahya
Checkov - Visual Studio Marketplace

Extension for Visual Studio Code - Find and fix misconfigurations in infrastructure-as-code manifests like Terraform, Kubernetes, Cloudformation, Serverless framework, Arm templates using Checkov - static analysis for infrastructure as code .

Zoom avatar
Zoom
07:30:11 PM

Jaime Salcedo has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:11 PM

Erik Osterman (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:13 PM

Vladimir Andreev has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:14 PM

Matteo Migliaccio has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:16 PM

Emile Fugulin has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:17 PM

Zadkiel has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:20 PM

Michael Jenkins has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:20 PM

Victor Xu has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:22 PM

Gabriel Boie has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:36 PM

Andy Miguel (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:55 PM

Andrew Thompson has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:10 PM

Florain Drescher has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:25 PM

Mohammed Yahya has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:25 PM

David Lozano has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:28 PM

mb Branski has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:30 PM

Andrey Nazarov has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:30 PM

Zachary Loeber has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:44 PM

Andy Roth has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:46 PM

Alexander Agent has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:57 PM

mb Branski has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:33 PM

James Haughey has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:33 PM

Alexander Agent has joined Public “Office Hours”

Andy Miguel (Cloud Posse) avatar
Andy Miguel (Cloud Posse)
Sponsor @cloudposse on GitHub Sponsors

Cloud Posse is a DevOps Accelerator that helps companies own their infrastructure in record time by building it with you and then showing you the ropes. Everything we do is 100% Open Source under A…

1
2
Zoom avatar
Zoom
07:33:38 PM

Michael Sew has joined Public “Office Hours”

Zoom avatar
Zoom
07:34:13 PM

Joe Hosteny has joined Public “Office Hours”

Zoom avatar
Zoom
07:34:21 PM

Tim Gourley has joined Public “Office Hours”

Zoom avatar
Zoom
07:34:51 PM

Rodrigo Quezada has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:16 PM

15139103984 has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:41 PM

Neil Gealy has joined Public “Office Hours”

Zoom avatar
Zoom
07:36:00 PM

Zachary Loeber has joined Public “Office Hours”

Zoom avatar
Zoom
07:37:58 PM

Joaquin Menchaca has joined Public “Office Hours”

Zoom avatar
Zoom
07:38:09 PM

Matt Gowie has joined Public “Office Hours”

Zoom avatar
Zoom
07:39:43 PM

Jeremy (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:41:32 PM

Robert Jackson has joined Public “Office Hours”

Zoom avatar
Zoom
07:41:33 PM

ASIS SETHI has joined Public “Office Hours”

Zoom avatar
Zoom
07:41:34 PM

Luis Masaya has joined Public “Office Hours”

Andrey Nazarov avatar
Andrey Nazarov

@Andy Miguel (Cloud Posse) could you please share your article? I think I’ve already read it. But I want to check it out again.

Andy Miguel (Cloud Posse) avatar
Andy Miguel (Cloud Posse)
Why is it hard to manage work for DevOps teams? - Blue Pisces

I don’t care what work management framework your team or company claims to use, making software will still be hard. Supporting those software teams is even harder. Good frameworks can definitely help you manage and deliver your work, but no system in the world can make a difference if people don’t follow the program.  This… Read More »Why is it hard to manage work for DevOps teams?​

1
Andrey Nazarov avatar
Andrey Nazarov

Thanks!

1
Zoom avatar
Zoom
07:51:02 PM

Oskar Maria Grande has joined Public “Office Hours”

Zoom avatar
Zoom
07:52:41 PM

mb Branski has joined Public “Office Hours”

Zoom avatar
Zoom
07:54:00 PM

cody halovich has joined Public “Office Hours”

Zoom avatar
Zoom
07:54:45 PM

Bruno Chauvet has joined Public “Office Hours”

Zoom avatar
Zoom
07:59:28 PM

Mahmoud Dolah has joined Public “Office Hours”

Zoom avatar
Zoom
08:00:03 PM

tamsky has joined Public “Office Hours”

Zoom avatar
Zoom
08:02:14 PM

Michael Bottoms has joined Public “Office Hours”

Zoom avatar
Zoom
08:02:30 PM

Jay Zalowitz has joined Public “Office Hours”

Mohammed Yahya avatar
Mohammed Yahya

@Erik Osterman (Cloud Posse) I’m losing faith https://github.com/awslabs/tecli

awslabs/tecli

In a world where everything is Terraform, teams use Terraform Cloud API to manage their workloads. TECLI increases teams productivity by facilitating such interaction and by providing easy commands…

Zoom avatar
Zoom
08:12:10 PM

Vicken Simonian has joined Public “Office Hours”

David Lozano avatar
David Lozano

what secret/keys management system you prefer to use?

managedkaos avatar
managedkaos

Don’t know if this been reviewed previously but I came across this last week and its pretty cool at visualizing AWS resources: https://github.com/duo-labs/cloudmapper

duo-labs/cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments. - duo-labs/cloudmapper

Joaquin Menchaca avatar
Joaquin Menchaca

How can one use terraform for marketplace with Azure, Google Cloud, AWS? I want to deploy distributed database (k8s or no k8s). AWS requires CFN for this. But I don’t know about Azure and GCP.

Zoom avatar
Zoom
08:16:33 PM

Tim Gourley has joined Public “Office Hours”

Marcin Brański avatar
Marcin Brański
SAML User VPN - Aviatrix

HOW WE’RE DIFFERENT User VPN Designed for the Cloud   Centrally-Managed VPN Visibility of all users, their connection history and all certificates across your network. Many Authentication Options LDAP/AD, DUO, Okta, MFA, Client SAML and other integrations. Profile-Based Access Control Answers “who can access what VPC?” Each VPN user can be assigned to a profile…

Matt Gowie avatar
Matt Gowie

https://github.com/masterpointio/terraform-aws-client-vpn — I forked an AWS Client VPN module to make it a bit more friendly and then used this for a client. I’m still not a fan of VPNs though.

masterpointio/terraform-aws-client-vpn

This terraform module installs a client VPN. Contribute to masterpointio/terraform-aws-client-vpn development by creating an account on GitHub.

Matt Gowie avatar
Matt Gowie

@Erik Osterman (Cloud Posse) if you ever want to move this to a cloudposse module , I’d be happy to donate it + move it when I’ve got some more time. It already using context.tf and would fit well in the library — just needs a bit of cleanup as I did it somewhat rushed for client.

masterpointio/terraform-aws-client-vpn

This terraform module installs a client VPN. Contribute to masterpointio/terraform-aws-client-vpn development by creating an account on GitHub.

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

ok, that would be rad - let’s discuss

1
Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
attachment image

We’re shipping the Boundary Desktop alpha today! Boundary continues to get better week by week. Its already pretty great but in a couple years this thing is going to be amazing. https://www.boundaryproject.io/docs/api-clients/desktop https://pbs.twimg.com/media/Euc_80tXcAA1ZeW.jpg

1
1
Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Timely tweet

kgib avatar

Office hours still going?

Zoom avatar
Zoom
09:44:37 PM

New Zoom Recording from our Office Hours session on 2021-02-17 is now available.

2021-02-15

2021-02-12

roth.andy avatar
roth.andy

I’d like to spend 5 minutes next office hours discussing the merits of INVEST and taking the audience’s temperature on how they feel about it

What does INVEST Stand For? attachment image

INVEST stands for a set of criteria used to assess the quality of a user story. If the story fails to meet one of these criteria, the team may reword it.

Andy Miguel (Cloud Posse) avatar
Andy Miguel (Cloud Posse)

@roth.andy this is a good way to evaluate how well a story was articulated. I’ve written tons of these for infrastructure teams and the best outcomes are always when it’s a collaborative process with the engineers doing the work. having a good template (e.g. what, why, etc. etc.) that drives the right conversation definitely helps makes that magic happen.

What does INVEST Stand For? attachment image

INVEST stands for a set of criteria used to assess the quality of a user story. If the story fails to meet one of these criteria, the team may reword it.

2021-02-10

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
07:00:46 PM

@here office hours is starting in 30 minutes! Remember to post your questions here.

Matteo avatar
Matteo

Wow.. can I attend? (and, if yes, how?)

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Go to https://cloudposse.com/office-hours to register and get the zoom link

Matteo avatar
Matteo

Done, thanks

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Hi~ Anyone have experience/recommendation keeping your Terraform code DRY? Like how Terragrunt does it, but using Terraform Cloud, Scalr, or Spacelift? We have a few environments we “promote” infrastructure changes to (dev –> test –> prod) and would like get away from “copying” the same terraform code/modules . I notice env0 has support for terragrunt, but want to know what others have done

TIA!

Zoom avatar
Zoom
07:28:19 PM

Erik Osterman (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:28:23 PM

Andrew L has joined Public “Office Hours”

Zoom avatar
Zoom
07:28:30 PM

Andy Roth has joined Public “Office Hours”

Zoom avatar
Zoom
07:28:40 PM

Vlad Ionescu has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:00 PM

mb Branski has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:00 PM

Andy Miguel (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:27 PM

Mohammed Yahya has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:29 PM

Dustin Van Buskirk has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:01 PM

Renée Leia has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:16 PM

Kostis Kapelonis has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:30 PM

Matteo Migliaccio has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:53 PM

Patrick Joyce has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:53 PM

Colton Wrisner has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:53 PM

Ian Groff has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:58 PM

Maycon Santos has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:02 PM

Oliver Schoenborn has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:03 PM

Sam C has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:19 PM

Kristopher Flint has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:36 PM

Jeremy Branham has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:40 PM

Florain Drescher has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:41 PM

ASIS SETHI has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:45 PM

Matt Calhoun has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:48 PM

Bill Clark has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:51 PM

Michael Londeen has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:10 PM

Tim Gourley has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:27 PM

James Haughey has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:44 PM

Leo Zavala has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:50 PM

Imran Hussain has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:56 PM

Michael Jenkins has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:11 PM

15139103984 has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:51 PM

Jeremy (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:34:16 PM

Zachary Loeber has joined Public “Office Hours”

Zoom avatar
Zoom
07:34:34 PM

Sheldon Hull has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:48 PM

ASIS SETHI has joined Public “Office Hours”

Zoom avatar
Zoom
07:36:30 PM

Julian Severino has joined Public “Office Hours”

Zoom avatar
Zoom
07:40:54 PM

emem umoh has joined Public “Office Hours”

Zoom avatar
Zoom
07:46:14 PM

Manish Sawlani has joined Public “Office Hours”

Zoom avatar
Zoom
07:47:10 PM

PePe Amengual has joined Public “Office Hours”

Zoom avatar
Zoom
07:47:33 PM

Andrew Thompson has joined Public “Office Hours”

Zoom avatar
Zoom
07:47:57 PM

Udit Dave has joined Public “Office Hours”

Zoom avatar
Zoom
07:48:08 PM

Patrick Jahns has joined Public “Office Hours”

Zoom avatar
Zoom
07:48:46 PM

Pablo Costa has joined Public “Office Hours”

Zoom avatar
Zoom
07:50:17 PM

Andrey Nazarov has joined Public “Office Hours”

Zoom avatar
Zoom
07:51:54 PM

David Lozano has joined Public “Office Hours”

sheldonh avatar
sheldonh

Agree with @ . It was super cool concept, but it abstracts so much away you have to trust it as is, but once you start untangling all the cloudformation it was a bit concerning. Good for adhoc work/poc, but “devops” folks isn’t not for them imo

1
Patrick Jahns avatar
Patrick Jahns

Mind me asking what this was related to - I totally forgot it again

sheldonh avatar
sheldonh

AWS Copilot

sheldonh avatar
sheldonh

Pretty cool to try but it took control of so much behind the scenes if the layout/template didn’t fit or needed tweaking it was imo harder than perhaps a good terraform module as the starting point (with a higher infra-as-code bar of entry required to build that of course)

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
AWS for GitHub Actions

AWS for GitHub Actions has 11 repositories available. Follow their code on GitHub.

Vlad Ionescu avatar
Vlad Ionescu
aws-actions/aws-codebuild-run-build

Run a AWS CodeBuild project as a step in a GitHub Actions workflow job. - aws-actions/aws-codebuild-run-build

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
cloudposse/terraform-aws-ec2-autoscale-group

Terraform module to provision Auto Scaling Group and Launch Template on AWS - cloudposse/terraform-aws-ec2-autoscale-group

Zoom avatar
Zoom
07:58:05 PM

Oliver Schoenborn has joined Public “Office Hours”

Zoom avatar
Zoom
07:58:31 PM

Blaise Pabon has joined Public “Office Hours”

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
Support ASG Instance Refresh · Issue #13785 · hashicorp/terraform-provider-aws

Community Note Please vote on this issue by adding a reaction to the original issue to help the community and maintainers prioritize this request Please do not leave "+1" or other comme…

Zoom avatar
Zoom
08:01:58 PM

Oskar Maria Grande has joined Public “Office Hours”

Zoom avatar
Zoom
08:01:58 PM

Petros Kolyvas has joined Public “Office Hours”

Zoom avatar
Zoom
08:07:13 PM

Dennis Lipovsky has joined Public “Office Hours”

Zoom avatar
Zoom
08:09:07 PM

Oskar Maria Grande has joined Public “Office Hours”

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
Kubernetes Deployment Antipatterns - part 1 - Codefresh

In our previous guide, we documented 10 Docker anti-patterns. This guide has been very popular as it can help you in your first steps with container images. Creating container images for your application, however, is only half the story. You still need a way to deploy these containers in production, and the de facto solution … Continued

Zoom avatar
Zoom
08:13:17 PM

mb Branski has joined Public “Office Hours”

Zoom avatar
Zoom
08:22:52 PM

Brandon vh has joined Public “Office Hours”

Zoom avatar
Zoom
12:27:25 AM

New Zoom Recording from our Office Hours session on 2021-02-10 is now available.

2021-02-09

2021-02-06

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

Hey guys, maybe you already discussed this here. But what you guys thing about this blog post: https://codefresh.io/kubernetes-tutorial/kubernetes-antipatterns-1/ specific about the 4th pattern, Mixing application deployment with infrastructure deployment

I am facing a similar concern with ECS were, I am adding 2 workflows in Github Actions, one for build and deploy the app, and another one for app-specific infra, like ECR or ECR task definition and service. My issue is to improve how we deal with race conditions, like ECR is not created yet and the app is being deployed. How do you guys deal with it?

2021-02-03

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
07:00:59 PM

@here office hours is starting in 30 minutes! Remember to post your questions here.

2
Leia Renée avatar
Leia Renée

Kubernetes provider, unauthorized issue. Sometimes kubernetes provider gives “unauthorized” error, causing the pipe line stop and exit. The problem happens randomly. The issue is discussed here. https://github.com/terraform-aws-modules/terraform-aws-eks/issues/911#issuecomment-761715025 The root cause of the problem seems to be the too short validation period of the token, which is 15 minutes. Some times EKS creation times, exceed 15 minutes which invalidates the token. I solved the problem using a dirty hack again with TG, using aws client tool in before hook.

Vlaad claims he solved the problem using Kubernetes provider 2.0 https://github.com/terraform-aws-modules/terraform-aws-eks/issues/911#issuecomment-771583572

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

@Vlad Ionescu

Vlad Ionescu avatar
Vlad Ionescu

Yup. Gimme 5 and I’ll join office hours

Vlad Ionescu avatar
Vlad Ionescu

My above comment is in regards to the localhost issue, not the unauthorized one. I have no idea if using the v2 terrafrom-provider-kubernetes fixes the auth issue too or not. https://github.com/hashicorp/terraform-provider-kubernetes/issues/918 is still open so

Something to test!

Kubernetes Provider 1.11.3 "Unauthorized" · Issue #918 · hashicorp/terraform-provider-kubernetes

Terraform Version and Provider Version Terraform v0.12.26 provider.archive v1.3.0 provider.aws v2.70.0 provider.helm v1.2.3 provider.kubernetes v1.11.3 provider.null v2.1.2 Affected Resource(s) kub…

Zoom avatar
Zoom
07:29:02 PM

Erik Osterman (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:27 PM

Andrew Thompson has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:27 PM

Tarlan Isaev has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:28 PM

Florain Drescher has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:39 PM

Andy Miguel (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:39 PM

Renée Leia has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:42 PM

mb Branski has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:43 PM

de la Torre Nicolás has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:43 PM

Bruce Messick has joined Public “Office Hours”

Zoom avatar
Zoom
07:29:59 PM

venkatamutyala has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:17 PM

Jeremy (Cloud Posse) has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:21 PM

Patrick Jahns has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:31 PM

mike dizon has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:39 PM

Evan Pitstick has joined Public “Office Hours”

Zoom avatar
Zoom
07:30:55 PM

Matt Calhoun has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:11 PM

Adrian Wnuk has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:11 PM

Andrey Nazarov has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:15 PM

Mahmoud Dolah has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:16 PM

Mohammed Yahya has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:26 PM

Tim Gourley has joined Public “Office Hours”

Zoom avatar
Zoom
07:31:35 PM

Eric Berg has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:12 PM

Adam Crown has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:24 PM

Matt Gowie has joined Public “Office Hours”

Zoom avatar
Zoom
07:32:31 PM

15139103984 has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:13 PM

ASIS SETHI has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:16 PM

mvensky has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:17 PM

Joaquin Menchaca has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:19 PM

David Lundgren has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:54 PM

Andrew Thompson has joined Public “Office Hours”

Zoom avatar
Zoom
07:33:56 PM

Brandon vh has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:03 PM

James Haughey has joined Public “Office Hours”

Zoom avatar
Zoom
07:35:36 PM

Julian Severino has joined Public “Office Hours”

Zoom avatar
Zoom
07:36:56 PM

KALYAN ALAMURU has joined Public “Office Hours”

Zoom avatar
Zoom
07:37:05 PM

Udit Dave has joined Public “Office Hours”

Zoom avatar
Zoom
07:38:02 PM

John Mitchell has joined Public “Office Hours”

Zoom avatar
Zoom
07:39:33 PM

Dennis Lipovsky has joined Public “Office Hours”

Zoom avatar
Zoom
07:41:29 PM

PePe Amengual has joined Public “Office Hours”

Zoom avatar
Zoom
07:44:52 PM

emem umoh has joined Public “Office Hours”

Zoom avatar
Zoom
07:45:22 PM

Vicken Simonian has joined Public “Office Hours”

Zoom avatar
Zoom
07:46:28 PM

Phil Sautter has joined Public “Office Hours”

Zoom avatar
Zoom
07:47:10 PM

Andy Roth has joined Public “Office Hours”

Zoom avatar
Zoom
07:48:32 PM

Kareem Shahin has joined Public “Office Hours”

Zoom avatar
Zoom
07:55:52 PM

Vlad Ionescu has joined Public “Office Hours”

Zoom avatar
Zoom
07:56:23 PM

Michael Jenkins has joined Public “Office Hours”

Zoom avatar
Zoom
08:00:55 PM

Imran Hussain has joined Public “Office Hours”

Andrey Nazarov avatar
Andrey Nazarov

I like this attitude that dev and staging are also production, but for different users! Two thumbs up!

1
Zoom avatar
Zoom
08:05:56 PM

Oskar Maria Grande has joined Public “Office Hours”

Zoom avatar
Zoom
08:06:30 PM

Sony Francis has joined Public “Office Hours”

Andrey Nazarov avatar
Andrey Nazarov
bliki: Yagni attachment image

Yagni (“You Aren’t Gonna Need It”) is the principle that we should not build presumptive features. It should not be used as a justification for neglecting internal quality.

1
Patrick Jahns avatar
Patrick Jahns

@ do you have a link to the flag you where referring to?

Mohammed Yahya avatar
Mohammed Yahya

@Erik Osterman (Cloud Posse) ^^

Mohammed Yahya avatar
Mohammed Yahya

makefile example:

init:
	@echo $(ORANGE)"==> TF Init"
	@terraform -chdir=$(DIR) init

upgrade:
	@echo $(ORANGE)"==> TF Upgrade"
	@terraform -chdir=$(DIR) init -upgrade=true

validate:
	@echo $(ORANGE)"==> TF Validate"
	@terraform -chdir=$(DIR) validate

plan:
	@echo $(ORANGE)"==> TF Plan"
	@terraform -chdir=$(DIR) plan

apply:
	@echo $(RED)"==> TF Apply"
	@terraform -chdir=$(DIR) apply -auto-approve
Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

thanks!!

roth.andy avatar
roth.andy
You aren't gonna need it

“You aren’t gonna need it” (YAGNI) is a principle of extreme programming (XP) that states a programmer should not add functionality until deemed necessary. XP co-founder Ron Jeffries has written: “Always implement things when you actually need them, never when you just foresee that you need them.” Other forms of the phrase include “You aren’t going to need it” and “You ain’t gonna need it”.

3
Zoom avatar
Zoom
08:15:56 PM

rajiv ranjan has joined Public “Office Hours”

roth.andy avatar
roth.andy
Standards attachment image

[Title text] “Fortunately, the charging one has been solved now that we’ve all standardized on mini-USB. Or is it micro-USB? Shit.”

1
roth.andy avatar
roth.andy
mumoshu/shoal

Declarative, Go-embeddable, and cross-platform package manager powered by https://gofi.sh/ - mumoshu/shoal

2
Zoom avatar
Zoom
08:28:22 PM

Akshay Jain has joined Public “Office Hours”

roth.andy avatar
roth.andy
Scale your Kubernetes & Continuous Deployments with Harness CD attachment image

Building continuous deployment pipelines that scale into Kubernetes? Harness equips you with the tools you need in order to ensure flawless K8s deployments.

Zoom avatar
Zoom
08:36:04 PM

Andrew Thompson has joined Public “Office Hours”

Zoom avatar
Zoom
10:01:36 PM

New Zoom Recording from our Office Hours session on 2021-02-03 is now available.

    keyboard_arrow_up